“Apple on Thursday released a Security and AirPort update for Mac OS X that fixes vulnerabilities found in the company’s wireless drivers. Apple said the issues found were the result of an internal audit of the software drivers and that no known exploits exist for the issues addressed in this update,” Jim Dalrymple reports for Macworld.
“The internal audit came as a result of claims by a senior researcher at SecureWorks that said he had revealed a vulnerability in Apple’s MacBook wireless software driver that would allow him to take control of the machine. SecureWorks later clarified its position and said it had used a third-party driver and not Apple’s driver,” Dalrymple reports.
Dalrymple reports, “Apple has maintained that SecureWorks has provided no proof that Mac drivers are vulnerable in any way. ‘They did not supply us with any information to allow us to identify a specific problem, so we initiated an internal audit,’ Apple spokesman, Anuj Nayar, told Macworld. ‘Today’s update preemptively strengthens our drivers against potential vulnerabilities, and while it addresses issues found internally by Apple, we are open to hearing from security researchers on how to improve security on the Mac.'”
More in the full article here.
Apple releases AirPort Update 2006-001 and Security Update 2006-005 – September 21, 2006
SecureWorks admits falsifying Apple MacBook ‘60-second wireless hijacking?’ – August 18, 2006
Re: Brian Krebs’ reporting on supposed MacBook Wi-Fi exploit – August 04, 2006
Hijacking an Apple Macbook in 60 seconds video posted online – August 03, 2006
Hijacking an Apple Macbook in 60 seconds – August 02, 2006